lsdsk 1.0.0__tar.gz

lsdsk-1.0.0/.claude-plugin/marketplace.json

@@ -0,0 +1,16 @@
+{
+  "name": "lsdsk",
+  "owner": {
+    "name": "bitranox"
+  },
+  "metadata": {
+    "description": "lsdsk delivered as a single Claude Code plugin: a skill to inspect and diagnose storage topology, link speeds and disk health on Linux and Windows."
+  },
+  "plugins": [
+    {
+      "name": "lsdsk",
+      "source": ".",
+      "description": "Install and use lsdsk: group disks by controller, compare every link against what both ends could do, read SMART wear and error counters, and decide whether a slow link is a fault, a better slot, or a mainboard limit."
+    }
+  ]
+}

lsdsk-1.0.0/.claude-plugin/plugin.json

@@ -0,0 +1,11 @@
+{
+  "name": "lsdsk",
+  "description": "See which disks hang off which controller, whether each one runs at the speed it could, and how worn it is. Ships the lsdsk skill: install via uvx, read the topology tree and the problem summary, interpret every finding class, and tell an actionable fault from a mainboard ceiling that only a different board would lift.",
+  "version": "1.0.0",
+  "author": {
+    "name": "bitranox"
+  },
+  "homepage": "https://github.com/bitranox/lsdsk",
+  "repository": "https://github.com/bitranox/lsdsk",
+  "license": "MIT"
+}

lsdsk-1.0.0/.devcontainer/devcontainer.json

@@ -0,0 +1,22 @@
+{
+  "image": "mcr.microsoft.com/devcontainers/python:3.13",
+
+  "postCreateCommand": "bash -lc '\nPY=/usr/local/bin/python;\n$PY -m pip install -U pip && \\\n$PY -m pip install ipykernel && \\\n$PY -m pip install -e . && \\\n# register kernel using this exact interpreter\n$PY -m ipykernel install --name=python3 --display-name=\"Python 3 (3.13)\" --user && \\\n# patch the notebook to point to the python3 kernelspec (VS Code will bind to /usr/local/bin/python)\n$PY - <<\"PY\"\nimport json, pathlib\np = pathlib.Path(\"notebooks/Quickstart.ipynb\")\nif p.exists():\n    nb = json.loads(p.read_text(encoding=\"utf-8\"))\n    md = nb.setdefault(\"metadata\", {})\n    md[\"kernelspec\"] = {\n        \"name\": \"python3\",\n        \"display_name\": \"Python 3 (3.13)\",\n        \"language\": \"python\"\n    }\n    md[\"language_info\"] = {\"name\": \"python\"}\n    p.write_text(json.dumps(nb, ensure_ascii=False, indent=1), encoding=\"utf-8\")\n    print(\"Pinned kernelspec to python3 in\", p)\nelse:\n    print(\"Notebook not found:\", p)\nPY'\n",
+
+  "customizations": {
+    "vscode": {
+      "extensions": ["ms-toolsai.jupyter", "ms-python.python"],
+      "settings": {
+        "workbench.startupEditor": "none",
+        "jupyter.alwaysTrustNotebooks": true,
+        "jupyter.kernelPickerType": "OnlyRecommended",
+        "python.defaultInterpreterPath": "/usr/local/bin/python"
+      }
+    },
+    "codespaces": {
+      "openFiles": ["README.md"]
+    }
+  },
+
+  "postAttachCommand": "bash -lc 'if [ -f notebooks/Quickstart.ipynb ]; then code -r notebooks/Quickstart.ipynb; fi'"
+}

lsdsk-1.0.0/.devcontainer/settings.json

@@ -0,0 +1,6 @@
+{
+  "python.defaultInterpreterPath": "/usr/local/bin/python3.13",
+  "jupyter.alwaysTrustNotebooks": true,
+  "jupyter.kernelPickerType": "OnlyRecommended",
+  "jupyter.askForKernelRestart": false
+}

lsdsk-1.0.0/.env.example

@@ -0,0 +1,366 @@
+# Copy to .env and fill values as needed.
+
+# Codecov upload token (required for private repos; optional for public repos)
+CODECOV_TOKEN=
+
+# PyPI API token for release workflow (.github/workflows/release.yml)
+# Format: pypi-AgENdGVzdC5weXBpLm9yZwIk...
+PYPI_API_TOKEN=
+
+# Optional: GitHub token for API-limited tasks
+GITHUB_TOKEN=
+
+# ==============================================================================
+# ==============================================================================
+#
+# Naming Convention
+# -----------------
+# Format: <SECTION>__<KEY>=value (double underscore separates section from key)
+# Lists use comma-separated values, booleans use true/false, floats use decimal notation.
+#
+# Full environment variable (outside .env):
+#   (triple underscore separates the application slug from the section)
+
+# Type: comma-separated strings in "host[:port]" format
+# Default: (empty, must be configured to send email)
+
+# Purpose: Default sender address for outgoing emails
+# Type: string (valid email address)
+# Default: (empty, must be configured or passed via --from)
+
+# Type: comma-separated strings (valid email addresses)
+# Default: (empty, must be configured or passed via --to)
+
+# Type: string
+# Default: (empty, no authentication)
+
+# Type: string
+# Default: (empty, no authentication)
+
+# Purpose: Enable STARTTLS negotiation before authentication
+# Type: boolean (true/false)
+# Default: true
+
+# Type: float
+# Default: 30.0
+
+# Type: boolean (true/false)
+# Default: true
+
+# Type: boolean (true/false)
+# Default: true
+
+# ==============================================================================
+# Logging Configuration (lib_log_rich)
+# ==============================================================================
+#
+# Naming Convention
+# -----------------
+# Format: <SECTION>__<KEY>=value (double underscore separates section from key)
+# Strings need no quotes. Booleans: true/false. Floats: 1.0. Lists: comma-separated.
+#
+# Full environment variable (outside .env):
+#   LSDSK___LIB_LOG_RICH__<KEY>=value
+#
+# For nested subsections (e.g. payload_limits):
+#   LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__<KEY>=value
+#   .env: LIB_LOG_RICH__PAYLOAD_LIMITS__<KEY>=value
+
+# --- Core Identity ---
+
+# Purpose: Logical service name recorded in each log event
+# Type: string (non-empty)
+# Default: "lsdsk"
+# Environment Variable: LSDSK___LIB_LOG_RICH__SERVICE=my-application
+# .env: LIB_LOG_RICH__SERVICE=my-application
+# LIB_LOG_RICH__SERVICE=my-application
+
+# Purpose: Deployment environment label
+# Type: string (non-empty)
+# Default: "prod"
+# Environment Variable: LSDSK___LIB_LOG_RICH__ENVIRONMENT=dev
+# .env: LIB_LOG_RICH__ENVIRONMENT=dev
+# LIB_LOG_RICH__ENVIRONMENT=dev
+
+# --- Console Output ---
+
+# Purpose: Minimum severity level emitted to Rich console
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "INFO"
+# Environment Variable: LSDSK___LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+# .env: LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+# LIB_LOG_RICH__CONSOLE_LEVEL=DEBUG
+
+# Purpose: Where to send console output
+# Type: string: "stdout", "stderr", "both", "custom", "none"
+# Default: "stderr"
+# Environment Variable: LSDSK___LIB_LOG_RICH__CONSOLE_STREAM=stderr
+# .env: LIB_LOG_RICH__CONSOLE_STREAM=stderr
+# LIB_LOG_RICH__CONSOLE_STREAM=stderr
+
+# Purpose: Console line layout preset
+# Type: string (case-insensitive): "full", "short", "full_loc", "short_loc"
+# Default: "short_loc"
+# Environment Variable: LSDSK___LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+# .env: LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+# LIB_LOG_RICH__CONSOLE_FORMAT_PRESET=short_loc
+
+# Purpose: Custom console output template (overrides preset)
+# Type: string (Python str.format template); empty = uses preset
+# Default: (empty, uses preset)
+# Environment Variable: LSDSK___LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# .env: LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# LIB_LOG_RICH__CONSOLE_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+
+# Purpose: Rich color palette for console output
+# Type: string: "classic", "dark", "neon", "pastel"
+# Default: "dark"
+# Environment Variable: LSDSK___LIB_LOG_RICH__CONSOLE_THEME=dark
+# .env: LIB_LOG_RICH__CONSOLE_THEME=dark
+# LIB_LOG_RICH__CONSOLE_THEME=dark
+
+# Purpose: Override Rich styles per severity level (comma-separated LEVEL=style pairs)
+# Type: comma-separated LEVEL=style pairs
+# Default: (empty, uses theme defaults)
+# Environment Variable: LSDSK___LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+# .env: LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+# LIB_LOG_RICH__CONSOLE_STYLES=DEBUG=dim,ERROR=bold red
+
+# Purpose: Force ANSI color output even when stderr is not a TTY
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: LSDSK___LIB_LOG_RICH__FORCE_COLOR=true
+# .env: LIB_LOG_RICH__FORCE_COLOR=true
+# LIB_LOG_RICH__FORCE_COLOR=true
+
+# Purpose: Disable color output entirely (overrides force_color)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: LSDSK___LIB_LOG_RICH__NO_COLOR=false
+# .env: LIB_LOG_RICH__NO_COLOR=false
+# LIB_LOG_RICH__NO_COLOR=false
+
+# --- Backend Adapters ---
+
+# Purpose: Minimum severity threshold for journald and Windows Event Log
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "WARNING"
+# Environment Variable: LSDSK___LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+# .env: LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+# LIB_LOG_RICH__BACKEND_LEVEL=WARNING
+
+# Purpose: Enable systemd journald adapter (Linux only; requires python3-systemd)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: LSDSK___LIB_LOG_RICH__ENABLE_JOURNALD=true
+# .env: LIB_LOG_RICH__ENABLE_JOURNALD=true
+# LIB_LOG_RICH__ENABLE_JOURNALD=true
+
+# Purpose: Enable Windows Event Log adapter (Windows only)
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: LSDSK___LIB_LOG_RICH__ENABLE_EVENTLOG=false
+# .env: LIB_LOG_RICH__ENABLE_EVENTLOG=false
+# LIB_LOG_RICH__ENABLE_EVENTLOG=false
+
+# --- Graylog / GELF ---
+
+# Purpose: Enable Graylog adapter for centralized logging
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: LSDSK___LIB_LOG_RICH__ENABLE_GRAYLOG=true
+# .env: LIB_LOG_RICH__ENABLE_GRAYLOG=true
+# LIB_LOG_RICH__ENABLE_GRAYLOG=true
+
+# Purpose: Graylog server address (host:port)
+# Type: string "host:port"
+# Default: (none, must be configured to enable Graylog)
+# Environment Variable: LSDSK___LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+# .env: LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+# LIB_LOG_RICH__GRAYLOG_ENDPOINT=graylog.example.com:12201
+
+# Purpose: Transport protocol for Graylog (tcp, udp); TLS only supported with tcp
+# Type: string: "tcp", "udp"
+# Default: "tcp"
+# Environment Variable: LSDSK___LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+# .env: LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+# LIB_LOG_RICH__GRAYLOG_PROTOCOL=tcp
+
+# Purpose: Wrap Graylog TCP connection in TLS
+# Type: boolean (true/false)
+# Default: false
+# Environment Variable: LSDSK___LIB_LOG_RICH__GRAYLOG_TLS=true
+# .env: LIB_LOG_RICH__GRAYLOG_TLS=true
+# LIB_LOG_RICH__GRAYLOG_TLS=true
+
+# Purpose: Minimum severity level sent to Graylog
+# Type: string (case-insensitive): "DEBUG", "INFO", "WARNING", "ERROR", "CRITICAL"
+# Default: "WARNING"
+# Environment Variable: LSDSK___LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+# .env: LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+# LIB_LOG_RICH__GRAYLOG_LEVEL=WARNING
+
+# --- Queue Settings ---
+
+# Purpose: Route log events through background queue worker (false = synchronous, blocks on I/O)
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: LSDSK___LIB_LOG_RICH__QUEUE_ENABLED=true
+# .env: LIB_LOG_RICH__QUEUE_ENABLED=true
+# LIB_LOG_RICH__QUEUE_ENABLED=true
+
+# Purpose: Maximum pending events before queue full policy applies
+# Type: integer (> 0)
+# Default: 2048
+# Environment Variable: LSDSK___LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+# .env: LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+# LIB_LOG_RICH__QUEUE_MAXSIZE=2048
+
+# Purpose: Behavior when queue is full
+# Type: string: "block" (wait for space), "drop" (discard events)
+# Default: "block"
+# Environment Variable: LSDSK___LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+# .env: LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+# LIB_LOG_RICH__QUEUE_FULL_POLICY=block
+
+# Purpose: Timeout in seconds for blocking queue puts (0 = infinite wait)
+# Type: float (>= 0)
+# Default: 1.0
+# Environment Variable: LSDSK___LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+# .env: LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+# LIB_LOG_RICH__QUEUE_PUT_TIMEOUT=1.0
+
+# Purpose: Maximum wait in seconds for queue drain during shutdown
+# Type: float (> 0)
+# Default: 5.0
+# Environment Variable: LSDSK___LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+# .env: LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+# LIB_LOG_RICH__QUEUE_STOP_TIMEOUT=5.0
+
+# --- Ring Buffer ---
+
+# Purpose: Enable in-memory circular buffer for log history (enables log.dump())
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: LSDSK___LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+# .env: LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+# LIB_LOG_RICH__ENABLE_RING_BUFFER=true
+
+# Purpose: Maximum events retained in ring buffer
+# Type: integer (> 0)
+# Default: 25000
+# Environment Variable: LSDSK___LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+# .env: LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+# LIB_LOG_RICH__RING_BUFFER_SIZE=25000
+
+# --- Dump Format ---
+
+# Purpose: Default layout for text dumps
+# Type: string (case-insensitive): "full", "short", "full_loc", "short_loc"
+# Default: "full"
+# Environment Variable: LSDSK___LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+# .env: LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+# LIB_LOG_RICH__DUMP_FORMAT_PRESET=full
+
+# Purpose: Custom template for text dumps (overrides preset)
+# Type: string (Python str.format template); empty = uses preset
+# Default: (empty, uses preset)
+# Environment Variable: LSDSK___LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# .env: LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+# LIB_LOG_RICH__DUMP_FORMAT_TEMPLATE={timestamp_trimmed_naive_loc} {level_code} {message}
+
+# --- Security & Payload ---
+
+# Purpose: Regex patterns to redact sensitive data (comma-separated field=regex pairs)
+# Type: comma-separated field=regex pairs
+# Default: password=.+,secret=.+,token=.+
+# Environment Variable: LSDSK___LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+# .env: LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+# LIB_LOG_RICH__SCRUB_PATTERNS=password=.+,secret=.+,token=.+,api_key=.+
+
+# Purpose: Throttle log emissions (MAX_EVENTS:WINDOW_SECONDS)
+# Type: string "max_events:window_seconds"
+# Default: (none, no rate limiting)
+# Environment Variable: LSDSK___LIB_LOG_RICH__RATE_LIMIT=100:60
+# .env: LIB_LOG_RICH__RATE_LIMIT=100:60
+# LIB_LOG_RICH__RATE_LIMIT=100:60
+
+# --- Payload Limits ---
+
+# Purpose: Truncate vs reject oversized messages
+# Type: boolean (true/false)
+# Default: true
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+# LIB_LOG_RICH__PAYLOAD_LIMITS__TRUNCATE_MESSAGE=true
+
+# Purpose: Maximum characters in primary log message
+# Type: integer
+# Default: 4096
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+# LIB_LOG_RICH__PAYLOAD_LIMITS__MESSAGE_MAX_CHARS=4096
+
+# Purpose: Maximum keys in extra metadata dict
+# Type: integer
+# Default: 25
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_KEYS=25
+
+# Purpose: Maximum characters per extra value (after stringify)
+# Type: integer
+# Default: 512
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_VALUE_CHARS=512
+
+# Purpose: Maximum nesting depth for extra structures
+# Type: integer
+# Default: 3
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_DEPTH=3
+
+# Purpose: Total UTF-8 byte limit for sanitized extra payload
+# Type: integer
+# Default: 8192
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+# LIB_LOG_RICH__PAYLOAD_LIMITS__EXTRA_MAX_TOTAL_BYTES=8192
+
+# Purpose: Maximum keys in LogContext.extra
+# Type: integer
+# Default: 20
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+# LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_KEYS=20
+
+# Purpose: Maximum characters per context value
+# Type: integer
+# Default: 256
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+# LIB_LOG_RICH__PAYLOAD_LIMITS__CONTEXT_MAX_VALUE_CHARS=256
+
+# Purpose: Number of frames preserved in exception tracebacks
+# Type: integer
+# Default: 10
+# Environment Variable: LSDSK___LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+# .env: LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+# LIB_LOG_RICH__PAYLOAD_LIMITS__STACKTRACE_MAX_FRAMES=10
+
+# ---------------------------------------------------------------------------
+# Real-hardware end-to-end tests (make testintegration)
+# ---------------------------------------------------------------------------
+#
+# Which machines `tests/e2e/test_real_hardware.py` ships the probe to. Left
+# empty here and set in .env, which is never committed: a fleet's hostnames are
+# infrastructure, and this repository is public.
+#
+# Format: comma-separated host:user:family, family being linux or windows.
+# Example: LSDSK_E2E_HOSTS="server-a:root:linux,workstation-b:admin:windows"
+#
+# Unset, the hardware tests skip and say so. Authentication uses the ssh key at
+# ~/.ssh/, never a password in this file.
+LSDSK_E2E_HOSTS=

lsdsk-1.0.0/.gitattributes

@@ -0,0 +1,15 @@
+# Normalize every text file to LF in the repo AND the working tree, on every OS.
+# `text=auto` auto-detects binary and leaves it untouched; `eol=lf` forces LF checkout
+# so a Windows edit/save cannot reintroduce CRLF churn.
+* text=auto eol=lf
+
+# Runtime-critical: CRLF here breaks execution on Linux (^M in shebang / make recipes).
+Makefile     text eol=lf
+*.sh         text eol=lf
+*.py         text eol=lf
+*.ps1        text eol=lf
+*.toml       text eol=lf
+*.md         text eol=lf
+*.json       text eol=lf
+*.yml        text eol=lf
+*.yaml       text eol=lf

lsdsk-1.0.0/.github/actions/extract-metadata/action.yml

@@ -0,0 +1,108 @@
+name: Extract project metadata
+description: >-
+  Parse pyproject.toml and expose project metadata as step outputs.
+  Requires Python to be available in the runner environment.
+  Auto-installs rtoml if not already present.
+
+outputs:
+  PACKAGE_MODULE:
+    description: Python-importable module name (underscored)
+    value: ${{ steps.meta.outputs.PACKAGE_MODULE }}
+  PROJECT_NAME:
+    description: Project name from pyproject.toml
+    value: ${{ steps.meta.outputs.PROJECT_NAME }}
+  CLI_BIN:
+    description: CLI entry-point binary name
+    value: ${{ steps.meta.outputs.CLI_BIN }}
+  SRC_PATH:
+    description: Source directory path (e.g. "src")
+    value: ${{ steps.meta.outputs.SRC_PATH }}
+  COV_FAIL_UNDER:
+    description: Minimum coverage percentage from tool.coverage.report.fail_under
+    value: ${{ steps.meta.outputs.COV_FAIL_UNDER }}
+  COV_REPORT_FILE:
+    description: Coverage report filename (e.g. "coverage.xml")
+    value: ${{ steps.meta.outputs.COV_REPORT_FILE }}
+  PYTEST_VERBOSITY:
+    description: Pytest verbosity flag (e.g. "-vv")
+    value: ${{ steps.meta.outputs.PYTEST_VERBOSITY }}
+  BANDIT_SKIP_FLAG:
+    description: Bandit skip flag string (e.g. "-s B101,B601") or empty
+    value: ${{ steps.meta.outputs.BANDIT_SKIP_FLAG }}
+  PYTEST_MARKER_EXPR:
+    description: >-
+      Marker expression for the CI test run (e.g. "not local_only and not integration"),
+      built from tool.ci.pytest-exclude-markers
+    value: ${{ steps.meta.outputs.PYTEST_MARKER_EXPR }}
+
+runs:
+  using: composite
+  steps:
+    - name: Extract project metadata from pyproject.toml
+      id: meta
+      shell: python
+      run: |
+        import os, subprocess, sys
+        try:
+            import rtoml
+        except ModuleNotFoundError:
+            subprocess.check_call([sys.executable, "-m", "pip", "install", "rtoml", "-q"])
+            import rtoml
+
+        from pathlib import Path
+        data = rtoml.load(Path('pyproject.toml'))
+
+        # --- [project] section ---
+        project = data['project']['name']
+        module = project.replace('-', '_')
+        dash = project.replace('_', '-')
+        scripts = list(data['project'].get('scripts', {}).keys())
+        cli_bin = scripts[0] if scripts else dash
+
+        # --- [tool.scripts.test] section ---
+        scripts_test = data.get('tool', {}).get('scripts', {}).get('test', {})
+        src_path = scripts_test.get('src-path', 'src')
+        pytest_verbosity = scripts_test.get('pytest-verbosity', '-vv')
+        cov_report_file = scripts_test.get('coverage-report-file', 'coverage.xml')
+
+        # --- [tool.coverage.report] section ---
+        cov_fail_under = (
+            data.get('tool', {}).get('coverage', {}).get('report', {}).get('fail_under', 90)
+        )
+
+        # --- [tool.bandit] section ---
+        bandit_skips = data.get('tool', {}).get('bandit', {}).get('skips', [])
+        bandit_skip_flag = f"-s {','.join(bandit_skips)}" if bandit_skips else ""
+
+        # --- [tool.ci] section ---
+        # CI always skips local_only (those tests need a dev box). A project whose
+        # suite also carries markers CI cannot satisfy - integration tests needing a
+        # container that a separate workflow starts - names them here, rather than
+        # every such repo forking this workflow to edit one -m expression.
+        ci_config = data.get('tool', {}).get('ci', {})
+        exclude_markers = ['local_only', *ci_config.get('pytest-exclude-markers', [])]
+        pytest_marker_expr = ' and '.join(f'not {m}' for m in exclude_markers)
+
+        # Write to GITHUB_OUTPUT for composite action outputs
+        with open(os.environ['GITHUB_OUTPUT'], 'a', encoding='utf-8') as out:
+            out.write(f"PROJECT_NAME={project}\n")
+            out.write(f"PACKAGE_MODULE={module}\n")
+            out.write(f"CLI_BIN={cli_bin}\n")
+            out.write(f"SRC_PATH={src_path}\n")
+            out.write(f"PYTEST_VERBOSITY={pytest_verbosity}\n")
+            out.write(f"COV_REPORT_FILE={cov_report_file}\n")
+            out.write(f"COV_FAIL_UNDER={cov_fail_under}\n")
+            out.write(f"BANDIT_SKIP_FLAG={bandit_skip_flag}\n")
+            out.write(f"PYTEST_MARKER_EXPR={pytest_marker_expr}\n")
+
+        # Also write to GITHUB_ENV so subsequent steps can use ${{ env.VAR }}
+        with open(os.environ['GITHUB_ENV'], 'a', encoding='utf-8') as env:
+            env.write(f"PROJECT_NAME={project}\n")
+            env.write(f"PACKAGE_MODULE={module}\n")
+            env.write(f"CLI_BIN={cli_bin}\n")
+            env.write(f"SRC_PATH={src_path}\n")
+            env.write(f"PYTEST_VERBOSITY={pytest_verbosity}\n")
+            env.write(f"COV_REPORT_FILE={cov_report_file}\n")
+            env.write(f"COV_FAIL_UNDER={cov_fail_under}\n")
+            env.write(f"BANDIT_SKIP_FLAG={bandit_skip_flag}\n")
+            env.write(f"PYTEST_MARKER_EXPR={pytest_marker_expr}\n")

lsdsk-1.0.0/.github/dependabot.yml

@@ -0,0 +1,22 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    allow:
+      - dependency-type: "direct"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+      include: "scope"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+      - "dependencies"
+    commit-message:
+      prefix: "deps"
+      include: "scope"

lsdsk-1.0.0/.github/workflows/codeql.yml

@@ -0,0 +1,39 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [ main, master ]
+  pull_request:
+    branches: [ main, master ]
+  schedule:
+    - cron: '0 8 * * 1'
+
+jobs:
+  analyze:
+    name: CodeQL Analyze
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'python' ]
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@v4
+        with:
+          languages: ${{ matrix.language }}
+
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@v4
+
+      - name: Perform CodeQL Analysis
+        uses: github/codeql-action/analyze@v4
+        with:
+          category: "/language:${{ matrix.language }}"